FACILITY FORM 602 


NASA TECHNICAL 
MEMORANDUM 


NASA TM X-58044 
April 1970 



A CASE STUDY OF THE APOLLO LUNAR MODULE 
DIGITAL AUTOPILOT 


Presented to the 

1969 Case Studies in System Control Conference 
Sponsored by the IEEE Group on Automatic Control 
The University of Colorado 



NATIONAL AERONAUTICS AND SPACE ADMINISTRATION 
MANNED SPACECRAFT CENTER 
HOUSTON, TEXAS 



NASA TM X- 5 8044 


A CASE STUDY OF THE APOLLO LUNAR MODULE 
DIGITAL AUTOPILOT 


Dr. Kenneth J. Cox 
Manned Spacecraft Center 
Houston, Texas 


(ft 





? 


A CASE STUDY OF THE APOLLO LUNAR MODULE DIGITAL AUTOPILOT 
Kenneth J. Cox 

Chief, Systems Analysis Branch 
Guidance and Control Division 
National Aeronautics and Space Administration 
Manned Spacecraft Center 
Houston, Texas 


ABSTRACT 


The lunar module autopilot is a first-generation digital control-system design. The two torque sources 
available for the control function of the descent-stage configuration consist of l6 reaction Jets and a 
slow, gimbaled, throttlable engine. This case study includes a review of the design history, the design 
requirements, criteria, constraints, and general design philosophy of the control-system development. Com- 
parative flight-test results derived from design testing are presented. 
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INTRODUCTION 


In the fall of 196U, a significant Apollo Pro- 
gram decision was made; that is, to develop a dig- 
ital autopilot (DAP) for all spacecraft primary 
control systems. It is noteworthy that previous 
mann*“d-spacecraft designs (Mercury, Gemini) involved 
analog control-system techniques; thus, the Apollo 
DAP represents a first-generation design develop- 
ment. This paper contains a case study of the de- 
sign history of the lunar module ( LM) primary 
control system. The LM DAP, with respect to design 
requirements and constraints, is considered to be 
the most complex Apollo control system in use. 

Hence, significant original design concepts were 
necessarily required in the development process. 

The general purpose and motivation of this paper 
are to provide some insight into the problems en- 
countered by the control-system designer. In many 
ways, the so-called "gap" between control- system 
theory and practice is the result of a lack of ap- 
preciation of the severe time and cost constraints 
under which the control- system designer is required 
to produce his product. 

Reading this paper, one may wonder why the total 
development has continued during a period of approx- 
imately U years; he may ask why the DAP should not 
be designed once and be finished. Most projects of 
this magnitude are iterative, because the require- 
ments sometimes change radically, because the ini- 
tial design constraints are generally poorly 
defined, because the inherent characteristics of the 
spacecraft plant are not well known, and because the 
basic input data for control-system design are fre- 
quently not available in a timely manner. It is 
important to realize that major design decisions 
must be made, rightly or wrongly, despite the lack 
of fundamental input information. Because of the 
basic factors that characteristically make the de- 
sign task difficult, the designer must adopt an im- 
plicit or explicit philosophy of providing some 
degree of flexibility in the control design, so as 
to accommodate future contingencies or unexpected 
developmental problems. 

The concept of performance margin will be exam- 
ined in a late’" section, but a point to be recog- 
nized now is tnat most papers on control theory 
emphasize obtaining optimum (or acceptable) perform- 
ance for nominal situations, whereas in practice, 
the acceptability of the total design is most often 
determined by performance under extreme, off-nominal 
conditions. Generally, establishing explicit math- 
ematical criteria for off-nominal perfor**'-.ce is 
extremely difficult; therefore, the suojective Judg- 
ment of the system designer (who uses significant 


simulation testing programs for design validation) 
is essential. 

A significant problem encountered in designing 
the DAP was the lack of effective analysis tech- 
niques for developing and evaluating the digital 
control system. The major design tools used were 
phase-plane simulation techniques in which tradeoffs 
and design constants were established by "cut-and- 
try" methods. A more colorful manner of expressing 
this approach is (l) "the [design] has been chosen 
on the basis if theoretical investigations and em- 
pirical observations." 


DESIGN CONSIDERATIONS 


Vehicle Characteristics 


The DAP provides stabilization and control of the 
IM during both coasting and powered flight in three 
configur-' tions — descent (Figure 1), ascent (Fig- 
ure 2) . tnd docked with the command and service 
mod'll''.- :SM) as shown in Figure 3. During the pre- 
linintr. spacecraft -design phase, many fundamental 
deiisi us were made that define (and constrain) the 
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Fig. 1. The IM descent configuration. 
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Fig. 2. Tne I*! ascent configuration. 


RCS Jets to obtain AV in the desired direction. 
Because the APS is a nongimbaled, fixed-thrcttle 
system, the RCS control laws associated with this 
mode must accommodate large time-variant disturb- 
ance torques. 

During DPS-powered flight, the design provides 
yaw control with the RCS Jets, and pitch/roll at- 
titude control with a combination of the RCS ana the 
gimbal trim system (GTS). The design problems as- 
sociated with dual control, including interactions 
between PCS and GTS modes, were significant for the 
DAP. As previously mentioned, the geometrical lo-’ 
cation of the RCS Jets is significant in establish- 
ing the fundamental design approach. The locations 
of the RCS Jets are shown in Figure U. The eight 
X-axis RCS Jets inherently provide control about 
the U/Y axes, where the natural axes to corsider 
phase-plane logic design are the Q/R pilot (or body) 
axes. The descent engine (not shown) is gimbaled 
about the pitch (Q) and roll (R) axes. 



Fig. 3. The CSM-docked configuration of the IM. 


control-system design. For the IM, three basic pro- 
pulsion force and torque systems were established — 
reaction control system (RCS), -lescent propulsion 
system (DPS) , and ascent propulsion system (APS). 
Characteristics that influenced the control ta3k 
included the ty^e of actuation system, the geometri- 
cal location and number of thrusters or Jets (for 
redundancy) , and the type of thrust-variation sys- 
tem. 

The control options available to the systems 
designer are divided into various flight-mode cate- 
gories (Table 1). The RCS provides automat i c / manual 
rotation and small translation control for all LM 
configurations during coasting flight. During 
coasting flight, the design problem is characterized 
by the presence of extremely low disturbance torques 
(except for an RCS Jet-on failure). 

During APS -powered flight, the primary purpose 
of the RCS is to provide attitude stabilization and 
control. However, whenever feasible, it is a de- 
sign requirement to fire only the upward-thrusting 
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» Jets associated with RCS fuel system A 
(jets 2,4, 5,8, 10, 11, 13,and 15) 

■ ■ m Jets associated with RCS fuel system B 
(jets 1. 3, 6. 7, 9, 12, 14, and 16) 

Notes 

1 . The arrows indicate thrust direction , 

2. The P, Q, and R designations for the pilot axes and the 
P, U, and V designations for the control axes are used 

in connection with rotation. The X, Y, and Z designation 
are used in connection with translation. 

Fig. U. Locations of RCS Jets on IM. 

An important parameter not shown in Figure is 
the distance from the spacecraft center of mass to 
the geometric center of tne 16 RCS Jets. This 
equivalent arm length is dependent upon both con- 
figuration and propellant loading, and strongly 
influences the ability to translate in the I cr Z 
direction. 


Sensor Characteristics 

The sensor information available for the control- 
design problem is provided by an inertial platform 
called the inertial measurement unit (IMU). For 
attitude information, gimbal angles are provided 
through a coupling data unit (CDU). Basic trans- 
lational information is sensed by pulsed integrat- 
ing pendulous accelerometers (PIPA's) located on 
the inertial platform. Early in the design 
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TABLE 1. CHARACTERISTICS OF SPACECRAFT PROPULSION FORCES AND MOMENTS ? 
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process, the decision was made to eliminate the 
requirement for an independent set of rate-gyro 
sensors for the control function. Thu3 , the 
attitude-state-estimation function of the DAP is 
required to provide rate estimation, filtering (for 
stabilization) , and disturbance-acceleration esti- 
mation (when appropriate). 


Control-Mode Requirements 

The DAP control modes are established primarily 
by mission requirements. The three required capa- 
bilities are for general attitude maneuver and 
attitude hold, general RCS translation, and DPS/APS- 
powered- flight maneuvers. A listing of the control 
modes associated with the present design Is pre- 
sented in Table 2. The design of the control modes 
requiring phase-plane logic will oe emphasized in 
this case study. 


TABLE 2. CONTROL-MODE STRUCTURE OF THE DAP 


Control modes 

Coasting flight 

Powered flight 

Attitude hold 

Attitude hold 

Automatic maneuvering 

Automatic steering 

Manual attitude rate 

Manual attitude rate 

Manual X-axis rotational 
override 

Manual X-axis rotational 
override 

Rotational minimum 
impulse 

Manual translation 

jManual translation 



unbalanced couple-control requirements for APS- 
powered flight. 

Another class of constraints , generally identi- 
fied late in design-development phase, involved 
restrictions on RCS jet firing. These restrictions 
included duty-cycle constraints (because of propul- 
sion instabilities), exhaust-contamination con- 
straints (particles on windows, optics), thermal 
constraints (rendezvous radar, antennas , spacecraft- 
impingement heating) , and operational constraints 
(during extravehicular activity docking). 

A third class of constraints that influenced the 
design problem was associated with propulsion- 
system characteristics. The slow-speed trim-gimbal- 
actuator characteristics of the DPS were established 
for crew safety to avoid hardover actuator failures 
during powered descent of the IM. A special gear 
drive was developed to restrict the trim-gimbal- 
drive rate to ±0.2 degrees per second. Unlike the 
classical actuator used for the CSM thrust-vector- 
control system, the DPS actuator cannot fail at a 
higher drive rate. A second propulsion-system 
constraint was associated with the decision to have 
a nongimbaled APS engine. This decision imposed 
significant limits on allowable center-of-mass 
characteristics during powered ascent flight. Un- 
fortunately, effective control of mass-property 
characteristics is extremely difficult in a program 
such as Apollo. Another propulsion-system con- 
straint was associated with the decision to locate 
the RCS Jets U 5 degrees from the body axes. This 
geometry significantly influenced the interaction 
between the RCS mode (U/V axes) and the GTS mode 
(Q/R axes) during DPS -powered flight. With respect 
to design and development, effective analytical 
techniques were virtually nonexistent for this 
problem. 

The fourth class of constraints that impacted 
the design problem included computer-oriented re- 
strictions. The LM guidance computer (LGC) is 
limited in both fixed and erasable memories; in 
addition, definite timing restrictions are placed 
upon the programs required to provide the control 
functions . 
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Design Constraints 


Numerous constraints influenced the DAP design, 
the most predominant class of which related to 
weight restrictions associated vith the lunar- 
landing program. Weight considerations constrained 
the system design in structural characteristics of 
the LM/CSM — structural bending modes are signifi- 
cant; in propellant-sloshing dynamics — slosh 
baffles were removed early in the program; "and in 


Performance and Stability Criteria 

The criteria for establishing the adequacy of 
the DAP design are outlined in Table 3, which lists 
functional criteria for both coasting-flight and 
powered-f light control modes. 
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TABLE 3. PERFORMANCE AND STABILITY CRITERIA 
OF' THE DAP 


Control modes 

Coasting flight 

Powered flight 

Transient behavior — ac- 
quisition and recovery 

Stability characteristics 

Limit-cycle characteris- 
tics 

Integrated AV pointing 
accuracy 

Attitude-maneuver-rate 

overshoot 

Attitude-transient be- 
havior 

RCS propellant consump- 
tion 

Limit-cycle characteris- 
tics 

Toted number of Jet 
firings 

Steady-state attitude 
offset 


RCS propellant consump- 
tion 


Total number of jet 
firings 


SCOPE OF PRESENTATION 


Primary emphasis will be given to reviewing the 
design of the LM powered-flight modes. These modes 
are considerably more complicated than the coasting- 
flight modes ard provide significant insight into 
the design principles. The manual modes, as well 
as the associated displays and astronaut LGC-input 
functions, are beyond the scope of this case study. 
Otuer areas that are not discussed include ground/ 
spacecraft interfaces, general operational proce- 
dures, and software-implementation techniques 
(ircluding coding verification). 

DESIGN PHILOSOPHY 


Genet a! Design Guidelines 

Various decisions made in the initial DAP 
control-system developmental plane established gen- 
eral design guidelines. A partial list of these 
guidelines Includes: 

1. Simultaneous three-axis attitude maneuver- 
ing is required (as opposed to sequential-maneuver 
techniques ) . 

2. Attitude rotation shall have RCS priority 
logic over translation (an alternate technique is 
a shar e-type logic). 

3. The control system must provide acceptable 
performance with single RCS Jet failures (on/off), 
with reasonable inertia-mismatch variations, and 
without information about single externally c.is- 
abled Jets. 

4. The spacecraft mass-property information 
must be updated during DPS/APS powered- flight ma- 
neuvers . 

5. The GTS control loop must be stabilized 
independently of the RCS control loop. 


General Philosophy 

Ini* ally, an important question with respect to 
design philosophy was how to use the inherent flex- 
ibility associated with a spacecraft digital com- 
puter. This question was especially significant 
because the DAP represented a first-generation, 
digital design development. ESaphasis was placed 
upon using digital capabilities such as logic 
(switching, branching), nonlinear computations, 
and function generation. For example, design con- 
siderations of the timing structure for the RCS/GTS 
control laws during DPS-powered flight included 
consideration of simultaneous control, sequential 
control, and time-interlaced logic control. These 
options are generally limited to analog control- 
system design. Another example was the reduction 
of switching- line chatter by logical branching to 
achieve improved performance under inertia mis- 
match, undetected Jet failures, and ullage (X-axis 
translation) maneuvers. 

The concept of performance margin was an area of 
design philosophy that influenced DAP development. 
This concept emphasized the principle that the ac- 
ceptability of tie design should be based upon per- 
formance of the system during extreme (but 
required), degraded conditions. Acceptable per- 
formance during off-nominal conditions, such as 
3ingle undetected Jet failures, and large control- 
effectiveness uncertainties (thrust magnitude, 
inertia properties, thrust misalignment, actuator 
drive rates, etc.), was difficult to achieve. The 
performance-margin concept identified a general 
trade-off between lowering the nominal to achieve 
acceptable performance during degraded conditions 
and maintaining high nominal performance despite 
severe degradation during cff-ncminal conditions. 

The control-system designer must use insight and 
judgment in establishing the degree of degradation 
(or margin) to which the design must accommodate in 
terms of performance. Even after this philosophy 
has been adopted, the ability to develop explicit 
mathematical criteria for off-nominal performance is 
still generally difficult to establish. 

Another general philosophy was maximum utiliza- 
tion of modern control-theory techniques and 
frecuency-domain techniques associated with sampled 
data-control systems. For example, the original 
attitude-state estimator developed for the DPS- 
powered flight was a Kalman filter. In addition, 
the GTS control loop was developed as a time- 
optimal control law. The many analytical methods 
available at that time were reviewed in reference 2, 
whose authors implied that state phase-plane tech- 
niques (involving simulations) would probably be the 
primary design tools in DAP development. Techniques 
considered, but discarded, included convergence and 
stability (Liapunov, Aizeman, Lagrange), modified 
rate diagram, d.3cribing function, and dynamic pro- 
graming. The concepts of defining regions of at- 
traction and ultimately bounded regions were found 
to be inapplicable for this design development. 

The philosophy of providing system-design flexi- 
bility to accommodate developmental problems or 
future contingencies was related to the concept of 
performance margin. An example was the guideline 
to stabilize the GTS conts ol loop independently of 
RCS control loop. Three years after this design 
was initiated, additional thermal constraints (which 
essentially restricted all X-axis RCS jet firings) 
were identified for the IM/C"! configuration during 
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DPS-powered flight. The design was flexible enough 
to accommodate this restriction without signifi- 
cantly affecting the program. 

The final design philosophy listed for DAP devel- 
opment was associated with the RCS propellant- 
performance requirements. Design emphasis tc 
achieve efficient propellent usage should be placed 
upon those control functions that require the larg- 
est amount of propellant over a complete mission 
profile. For the DAP, these control functions in- 
cluded manual translations , manual and automatic- 
attitude maneuvers , and maneuvers associated with 
powered-flight guidance. In this general sense, 
the importance of efficient RCS propellent perform- 
ance for coasting- flight and powered-flight 
minimum-impulse operation should be downgraded. 

Thus, one may reasonably ask why design complexity 
(and associated verification) should be increased 
to save 20 percent performance on an item that uses 
5 percent of the total mission propellant. A defi- 
nite trade-off exists between design complexity and 
performance-improvement payoff. 


DESCRIPTION OF DAF DESIGN 


The DAP design that was flight tested on the 
Apollo 9 manned mission will be described in this 
section. This design (associated with the SUNDANCE 
flight ropes) is described in reference 3, and will 
be treated as the base line design for the case 
study. Virtually all the following design descrip- 
tion is condensed from reference 3. 


Coasting-Flight Modes 

The two coasting-flight modes described are the 
attitude— hold mode, and the automatic— maneuver 
mode. A block diagram of the coasting- flight 
attitude-hold mode is presented in Figure 5. 

The major design elements include the attitude- 
state estimator, the RCS control laws, and the 
Jet-selection logic, functional descriptions of 
which are provided in this section. 



m gp] = Transformation from gimbal axes to pilot axes 
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Fig. 5. Coasting- flight attitude-hold mode. 


The basic measurements available to the recur- 
sive state estimator are th *hree gimbal angles 
from the IMU. The estimator for coasting flight 
predicts both attitude and angular velocity, and 
uses nonlinear threshold logic to reject low-level 
me as virement noise. Angular-acceleration informa- 
tion caused by RCS Jet firings is an additional 
input to the state estimator. 

The RCS control laws compute the requirements 
for rotational impulses, using information based 
upon attitude phase-plane errors, control effec- 
tiveness, and phase-plane targeting logic. 

The jet-selection logic combines the required 
rotational impulses with the commanded translation 


inputs to select appropriate Jets for control ac- 
tion. Additional information used by the Jet- 
selection logic includes the desired number of 
Jets to be fired and the identification of 
disabled jets. 

Additional design elements shown in Figure 5 
are transformation equations and Jet-timing logic. 
The transformation equations, from gimbal to pilot 
axes, and from pilot to control axes, are straight- 
forward, not to be presented explicitly. The Jet- 
timing logic is used to establish mandatory 
conditions for two- jet control in the U/V axes, 
and for four- jet control in the P-axis . 
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A block diagram of the coasting-flight 
automat i e-maneuver control mode is presented in 
Figure 6. Automatic maneuvers are implemented 
using the sane logic as attitude hold, except for 
the attitude-maneuver routine. This routine pro- 
vides desired steering commands in both attitude 
and rate , as veil as generating a set of lag 
angles 0. These lag angles are introduced x o 
prevent overshoot when initiating or terminating 
an automatic maneuver. The simplified single- 
plane equations for the attitude-maneuver routine 
are given as 


r i AT_ 

"d(M * * x ) ’ M*»)] (11 


MM ' 6 M Vi) * *MM 


0 = 



( 2 ) 

(3) 


where Equation (l) is computed every steering 

cycle (AT- = N - N = 2 sec.), and Equation (2) 
t j J-x 

is computed every control cycle (AT g =0.1 sec.).. 


The value of <d^ is set by the maneuver-rate input, 
;and ctj is defined as the magnitude of the as- 
sumed two-jet acceleration. When the maneuver is 
completed, u^, AQ^, and 0 are reset to zero, 

and the control system reverts to attitude hold 
about the desired gimbal angles. 


Powered-Flight Automatic Mode 

The control operations associated with powered 
flight are considerably more complicated than 
coasting-flight operations. Major additions for 
both DPS- and APS-powered flight include an inte- 
grated guidance and navigation outer loop that 
interfaces with the DAP through a steering routine, 
and a mass monitor-and-control parameter routine. 

In addition, the state estimator is required to 
derive offset angular acceleration o. The RCS 
control laws are modified by making the control 
effectiveness and the phase-plane targeting logic 
dependent upon the estimated offset angular acceler- 
ation. During DPS- powered flight, a control lav 
for the GTS is required. A timing-and-control- 
logic interaction between the RCS control and the 
GTS control is also required. A block diagram of 
the APS powered-flight automatic control is pre- 
sented in Figure 7. The major design elements 
(state estimator, control laws. Jet-selection 
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Fig. 6. Coasting- flight automatic-maneuver mode. 
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Fig. 7 . Powered-flight automatic control of the DPS. . 


logic) will be discussfed in detail in following 
sections . 


Control Effectiveness 

The DAP control laws and the recursive state 
estimator require information on the assumed RCS 
and GTS control effectiveness. The GTS control 
effectiveness is represented by the rate of change 
of angular acceleration, a p , caused by constant 

angular-drive-rate command to the actuators. A 
flow diagram indicating those factors that relate 
to the GTS control effectiveness is presented in 
Figure 8. 


The factors indicated in figure 8 are as follows: 
M = estimated mass 

L = LVM> distance from hinge pin of descent 
engine bell to center of mass of 1/4 
I * l(M) pitch or roll moment of inertia 
AV/At = measured linear acceleration 
Ug.Up = trim-gimbal drive commands (+1, 0, -1) 

• y for Q and R channels 

i - gimbal-drive rate of descent engine = 

0.2 deg. /sec. 

The effectiveness of the RCS control is represented 
by the angular acceleration <Xj about an axis from 

the firing of a single jet. A flow diagram con- 
taining the RCS control effectiveness equation in 
the P-, ft-, R-axes, and the appropriate equations 
for transformation to the P-, U-, V-axes is pre- 
sented in Figure 9. To represent the RCS angular 
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acceleration as a hyperbolic function of mass, a 
nominal Jet-torque level of 550 foot-pounds is 
assumed, and additional vehicle configuration 
assumptions are required to establish inertia char- 
acteristics a3 a function of mass. 


State Estimator 

The recursive state estimator for powered and 
coasting flight is described in this section. The 
most complex estimator design, associated with DPS- 
powered flight, will be described first. Kalman 
filter theory provides a reasonable structure for 
combining estimates of state changes causH by RCS 
Jet firings and trim-gimbal activity witn external 
measurements of attitude. The IM plant is assumed 
to be represented by a simplified set of rigid 
body equations of motion 


0 * u 

(U) 

ill « a + Uj 

(5) 


state at t is obtained by integrating Equa- 


tions (U ) , (5) 

, and (6) to obtain 


**(*■) ■ 

*(Vi) * "(Vi) 1 * HVii 

)£ 


( T -r) 

(8) 

“'(%>) - 

“M * ; (Vi) ’"or* 




(9) 


“’(*») ■ Kvi) * v 

(10) 


The extrapolated attitude variables are compared 
with the external measurements to obtain an updated 
estimate at t 

n 


} 


a * U r + N (6) 

G Cg 


where 6 * attitude 

a) = angular velocity 

a * offset angular acceleration caused by 
DPS/APS thrust 

Uj = angular acceleration caused by RCS Jet 
firings 

Uq =» rate of chang. of angular acceleration 
caused by descent engine gimbaling 
N = rate of change of angular acceleration 
caused by center-of-mass movement 
The time histories of the control outputs T T j 

and U. between sample instant t , and t are 

G n-1 n 

assumed to be the values commanded, and are repre- 
sented by 



where T - t - t ^ = control-sample period. 

The measurement equation is expressed by 

0 * 6 + N (7) 

m 


where N = measurement noise from vibration, track- 
ing errors of the CDU, and quantization. The esti- 
mation process requires the development of equations 
for state extrapolation and measurement incorpora- 
tion. Given the estimate of the state 8, m, a 
* at t , , and assuming the time histories of U T 

and Uq between t Q _ 1 and t R , the extrapolated 


*(*»)' "’W* “[•»(*«) - •’(•»)] (u) 

“(*») ' “'(*») * r[ 8 .(*n) ' 8 '(0] < 12 > 

i ( t n) -a '( t »)*^f.W- , '( t »)] U3) 

If the filter weights , K. , K , and K . are 

h til v* 

optimized based upon Kalman filter theory, the 
values are time variant, and are dependent upon the 
values of N cg and N, and the uncertainty in the 

initial state estimate. During the design develop- 
ment of the DAP, the optimum filter-gain concept 
was discarded after many problems were identified 
through simulation testing. At that time, a non- 
linear threshold filter was developed as part of 
the base line design. This filter and the thresh- 
old values associated with the concept were estab- 
lished from direct engineering considerations. 

Development of the nonlinear threshold filter 
was motivated by the specific properties of the 
measurement noise from the IMU. For the design 
considered, the predominant measurement noise is 
derived from the nonlinear-tracking servo charac- 
teristics of the electronic CDU's. Gimbal-angle 
information encoded in the LGC (for moderate 
angular vehicle velocities) contains high-frequency 
noise having a peak-to-peak amplitude of approxi- 
mately 0.09 degree. It is important to note that 
the distribution of this noise is rectangular 
rather than gaussian. A trap filter using thresh- 
old logic was developed to reject this type of low- 
level measurement noise. The logic and associated 
filter-gain equations are as follows. If I 0 - 

i | ® 

6*1 & 6 , then 

I max* 

K * K ® K =0 (ll») 

0 (i) a 
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e - e' 

m 


» 8 , then 

max 


K 9 - 1 


w n. + N 
t w 


K * — •rt.—m K 

a n, + N + N u 
two 


where 


threshold value (O.lU degree) 
rate gain constant 
acceleration gain constant 


n + *» number of sample periods that have 
elapsed since the threshold was ex- 
ceeded last 

Extersive testing has demonstrated that the non- 
linear threshold logic successfully rejects low- 
level aeasurement noise. This filter also performs 
well with respect to disturbances that are cyclic 
in rvture, such as slosh and structural vibrations. 
The filter gains for the rate and acceleration es- 
timates derived by Equation (15) are functions of 


If the trap overflows almost every time, it is 


generally desirable for the filter characteristics 
to provide a fast rate estimate and a slow accel- 
eration estimate. The desired response time on the 
acceleration estimate is set by requirements to 
track a moving center of mass ana to respond to 
time- variant thrust-actuation compliance effects. 
The upper limit on response time is restricted be- 
cause of the desire to avoid rapid fluctuations in 
the autopilot switching curves and because of the 
requirement to attenuate slo3h accelerations. 

If the threshold logic be exceeded only rarely, 
a maximum incorporation of the measurement is gen- 
erally desired. The logic given in Equations ( lU ) 
and (15) is actually a simplification c" the devel- 
oped design. The threshold value is actually com- 
pared with the total unexplained attitude that has 
accumulated since the last trap overflow, where the 
incremental amount for one control-sample period is 
the difference between the measured and the pre- 
dicted changes in attitude. 

A summary of the input and output variables as- 
sociated with the state estimator for DPS-powered 
flight is presented in Figure 10. 

Hie structure oi the estimator for APS-powered 
flight is f 'entical except that the variables as- 
sociated witn the JTS are deleted. Similarly, the 
state estimator for coasting flight is based upon 
the same structure, except that the estimated state 
does not include offset angular acceleration. The 
total estimator design represents an integrated 
concept with respect to both powered and unpowered 
modes of control. To conclude this section, the 
dynamical effects not explicit^ considered in the 
initial development of the filter equations will be 
identified, as follows. 


PropellanV-slosh dynamics 

Structural-bending dynamics 

Jet-Impingement- forces model 

Jet-thrust lags 

Jet -misalignment geometry 

Jet acceleration caused by Y/Z translation 

Undetected Jet failures 

Trim-gimbal lags 


9* Inertia mismatch 

10. DPS-actuator-compliance model 

11. Propellunt-fuel-shift model 


S J,P' a J,Q' a J,R Assumed RCS control effectiveness 


9q, Assumed GTS control effectiveness 
I Configuration bit 


[M] gimba l-to-pi lor increment matrix 


* , N^, N a filter parameters 


Gimbal angles 


State estimator 


— *f' V "R 

Angular velocity estimate 


(Direct measurement) 


V °R 


Bias angular acceleratior. estimate 


V U R 


Trim-gimbal activity 


tp. t u , t v 


Signed firing durations 


n p. n jj» n y 

Number ot jets selected 


Fig. 10. Input and output variables of the state 
estimator. 


Other assumptions that modified the estimator 
equations implemented in the filter design were 
that the cross products of inertia terms were 
ignored; that the terms. in Equations (8) and (9) 


caused by the trim-gimbal drive U„ were deleted- 


and that second-order rate terms were ignored in 
the equations of motion. 

Detailed verification testing was required to 
demonstrate the stability and performance, includ- 
ing the known dynamical effects, of the total 
system. Simulation testing supported the estab- 
lishment cf the critical filter values of 0 


N , and N q . An important consideration was testing 


the filter performance when an undetected Jet-off 
failure existed. Wh«- this condition occurs.- - the 
acceleration estimate will seek an average value 
double the actual acceleration offset present. 
Because the DPS acceleration-nulling control law 
is a function of the sign of the acceleration- 
offset estimate, and is invariant with the magni- 
tude, tbiB control law will seek the center of mass 
properly when undetected Jet-off conditions exi-it . 


RCS Control Laws 


Hie control laws associated with the RCS estab- 
lish Jet-firing durations (TJET values) based upon 
phase- plane logic and assumed control effective- 
ness. These control laws are predictive in nature 




t 


and a re related to the classical two-point-bouni&ry- 
value problem. To some extent, tnis predictive de- 
sign is inherently sensitive to the uncertainties ' 
control effectiveness and unmodeled disturbances. 

A description of the TJET LAWS associated with the 
IX descent and ascent configurations is provided 
in this section. 

Angular error/error-rate phase planes are estab- 
lished for each P, II, and V RCS control axis. 

Because the sets of Jets that produce rotation about 
each of these three axes are distinct, the P-, U-, 
and V-axis jets are turned on and off independently. 
A block diagram of the control-law inputs for the 
LM descent and ascent configurations is presented 
in Figure 11. 


«-p, ty# t v 

RCS CONTROL LAWS 

1. ROUGHLAW 

2. FINE LAW - coasting 

3. FINE L/ V - powered no. 1 

4. FiNELAW - powered no. 2 

TJET p 

• • » " 
Ep» Ey* ty 

“netpos 

TJETy 

a , 
netneq 

TJET V 

a * 

« coastpos _ 

a coastneg _ 



* 7 t — r 


Zone 3 FLAT DB 1-/2 -jet performance, 
LIM U/V axes 


Fig. 11. TJET LAWS, IX only. 

The attitude and rate errors E,E are used to 
establish the estimated state location in the phase 
plane. The acceleration inputs required by the RCS 
control laws include net angular acceleration (jet 
acceleration plus offset acceleration), and coast- 
ing acceleratin'" (acceleration caused by offset 
alone). The basic shape of the target parabolas 
and switching-line parabolas are set by tbis 
.angular-acceleration information. Additional 
inputs — deadband (DB) and FLAT — establish the 
positional location of these parabolas. The four 
different phase-plane configurations associated 
with the DAP design are listed in Figure 11. The 
TJET control logic is developed by dividing each 
phase-plane configuration into coasting and firing 
zones . 

The ROUGHLAW phase-plane configuration shewn in 
Figure 12 is used e 0 r all control modes whenever 
either the magnitude of E exceeds 11.25 degrees or 
the magnitude of E exceeds 5.625 degrees /second. 

If neither of these limits be exceeded, a FIHELAW 
phase-plane configuration is used in the RCS con- 
•ol logic. The use of ROUGHIAW for large values 
of E and E permits the efficient use of single 
precision arithmetic by the LGC. The computational 
ability to provide independent scaling for differ- 
ent regions of the error phase plane provides a 
significant flexibility compared with mo3t of the 
analog control-system designs. The ROUGHLaW phas 
plane configuration is divided into zones A to D. 

The logic for computing TJET for the upper half 
plane of ROUGHLAW is presented in Table ... 



Fig. 12. The ROUGHLAW phase plane. 


TABLE + .- ROUGHLAW TJET LOGIC 


Location 
of the 
IX state 

Basis of computing TJET 

Zone A 

TJET is the time required to drive E 
to -5.625 deg. /sec. 

Zone B 

TJET is set equal to 0.250 sec; that 
is, a "large" value. 

Zone C 

TJET is set equal to zero; that is, 
no Jets are turned on. 

Zone D 

TJET is the time required to drive E 
to +5.625 deg. /sec. 


The three phase-plane configurations associated 
with FIHELAW are shown in Figures 13, lh, and 15. 

The configurations include drifting flight, 
powered-descent flight when the trim-gimbal nulling 
times are less than 2 seconds, and powered-ascent 
flight or when the trim-gimbal nulling times are 
greater than 2 seconds. The PINELAW TJET logic for 
coasting flight is presented in Table 5. 

The zones 2 and 3 logic was developed to acquire a 
minimum-impulse limit cycle efficiently. The moti- 
vation for occasionally permitting the Jets to re- 
main on in zone U was to avoid svitching-line 
chatter when the net angular acceleration is under- 
estimated because of inertia mismatch. 

Hie FIHELAW phase-plane logic for powered- 
descent flight vhen the trim-gimbal nulling times 
are less than 2 seconds is identical to the coast- 
ing logic of Table 5, except that zone 3 has been 
eliminated, mis logic provides an efficient inter- 
face between the RCS and GTS control systems. 

me FIHELAW logic for the phase-plane configura- 
tion associated with Figure 15 is also similar to 
the coasting logic of Table 5* 'Hie principal excep- 
tions are that zones 2 and 3 have been eliminated. 
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and that the logic developed fro c rone 1* is to 
target to intersect & parabola instead of the 
E-axis plane. 



W/A cw n** 

I 1 I>«u — V— 


Fig. 13. The FIHELAV phase plane vhen the W is u 
drifting flight. 


E 



□ Th»w m »i 

Fig. lU. The FINELAW phase plane vhen both command 
trin-giabal nulling drive tines are less than 
2 seconds during powered descent. 


E 



Fig. 15 • The FINEIAW phase plane vhen the IX is in 
powered ascent or vhen either of the trin-giabal 
nulling drive tines is greater than 2 seconds 
during powered descent. 


TABLE 5.- FINELAW, COASTING TJET LOGIC 


Location 
of the 
IX state 

Basis cf computing TJET 

Zone 1 

TJET is the time required to drive 
the IX state to a "target parabola." 

Zone 2 

TJET is the time required to drive 
the IX error rate to zero. 

Lone 3 

TJET is set so small that the Jet- 
selection logic will fire a one-jet 
minimum impulse. 

Zone ^ 

TJET is set to zero unless the Jets 
for the axis concerned are already 
on and are driving the IX state to 
intersect the E axis between -DB„ 
and DB^. 

Zone 5 

TJET is the time required to '’rive 
the IX state to a "target 
parabola." 


As mentioned previously, the DB^ through DB| ( 

parameters , together vith FLAT, are used to estab- 
lish the positions of the phase-plane parabolas. 

The intercept values were established empirically 
through simulation testing, and are proportional to 
the DB. The proportionality constants, which were 
developed to depend logically upon tne estimated 
offset acceleration, are presented in Table 6. 

The general design strategy was to set the position 
of the parabolas to yield small, average , steady- 
state attitude errors during powered flight. The 
classic analog control-system trade-off of estab- 
lishing a single switching-line logic to provide 
adequate performance during both high- and low- 
disturbance— torque conditions is avoided in this 
design. 

Another input required for the RCS control laws 
is the indication of one-jet or tvo-Jet couple 
preference for U/V axes control. Normally, ore- jet 
control is desired for powered ascent and X-axis 
translation. However, additional logic associated 
with large phase-plane errors is used, requiring 
mandatory tvo-Jet couple control when certain con- 
ditions are exceeded. 

For the P-axis, the canputation of TJ5T is al- 
ways made on the basis of tvo-Jet couples. How- 
ever, the TJET logic is overridden and four Jets 
are fired for 0.1 second if certain TJET values and 
error-state conditions are exceeded. 


Jet-Selection Logic 

The RCS control lavs establish requirements for 
some number of jets tc be fired about the P-, U-, 
and V-axes. The translation-acceleration require- 
ments are obtained directly from guidance inputs or 
manual ccroands. The Jet-selection logic deter- 
mines the RCS Jet policy when provided the desired 
rotational torque Information, the desired direc- 
tion of translation, and the desired number of Jets 
to be used for each maneuver. In addition, the 
firing logic is modified when jets are known to be 
disabled. 
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TABLE 6.- CRITERIA TO DETERMINE THE INTERCEPT 
OF THE VHASL-PLAHE PARABOLAS 


are presented first. Because rotation takes prior- 
ity over translation, the Y- and Z-axis caomands 
are executed only when no P-axis cooanands are pres- 
ent. The norms! P-axis Jet-selection policy is 
presented in Table 7. 


Define 


a . = l.L deg. /sec. 2 

am 

A = estimated offset angular acceleration 

OS 

For powered flight (except when both of the com- 
manded trim-gimbal nulling drive times are less 
than 2 sec. during powered descent) 

FLAT = 0 and 


a) If A >a . , 
os min 


DB X = DB, DE 2 = 2DB, DB^ = -0.75DP. DB U = 


2DB 


b) If A < -a . , 
os am 


DB 1 = 2DB, DB g = DB, DB^ = 2DB, DB^ = -0.75DB 


c) IV a . > A > 0.5a . . 

mm os min - 


DB, = DB, DB. = DB, DB- = 0.5DB, DB, = DB 


d) If -0.5a > A > -a . , 

mm os sin 


DB 


l x = DB, DB 2 = DB, DB 3 = DB, DB^ = 0.5DB 


e) If 0.5a . > A > -0.5a , 

mm os mm 


DB 1 = DB 2 = DB 3 = DB^ * DB 


For drifting flight (and when both of the com- 
manded trim-gimbal nulling drive times are less 
than 2 sec. during powered descent) 


DB 1 = DB 2 = DB, DB^ « DB 3 * DB + FLAT, 
and FLAT « 0 " deg. 


The Jet-selection policies associated with the 
P-axis rotation and the Y- and Z-axis translations 


TABLE 7. P-AXIS FORMAL JET-SELECTION POLICY 


T*T>e of rotation 

Jet-selection policy 

L-jet, +P 

<*» 7, 12, 15 

2- jet, +P 

Alternate pulses between L and 
12, and between 7 and 15 

U-Jet, -P 

3, 8, 11, 16 

2-Jet, -P 

Alternate pulses between 3 and 
11, and between 8 and 16 


If of the rotation policies given m Tabxe 7 
involves a disabled Jet, then alternate two-jet ro- 
tation policies will be attempted in the following 
sequential order until a policy involving only 
enabled Jets is found. 


♦P Rotation -? Rotation 


7, iv 

8, 16 

k, 12 

3, 11 

7 

8, 11 

7, 12 

11, 16 

12, 15 

3, 16 

»*, 15 

3, 8 


The normal Y- and Z-axis translation policies, 
with alternate policies for disabled Jet3, are pre- 
sented in Table 8. 

The Jet-selection policies associated with the 
U- and V-axis rotations and the X-axis translation 
are now presented. If no conflict exists between 
jets required for translation and rotation, then 
both policies are executed. However, if a conflict 
exists, only the rotation policy is applied. 

The U- and V-axis rotational policies for both 
normal and disabled-jet conditions are presented 
in Table 9- 

Finally, the X-axis translational policies for 
both normal and disabled-jet conditions are pre- 
sented in Table 10. 

If no alternate disabled-jet policies be pos- 
sible, a computer program alarm is lighted and an 
alarm code informs the astronauts that a rotation 
or translation failure exists. This alarm procedure 
is applicable for all of the Jet-selection policies 
presented. 


& 
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~ABL£ 8. Y- AND Z-AXIS JIT-SELECTION POLICIES 


Type of translation 

Normal policy 

, 

Alternate disabled-jet policy 

+Y 

12, 16 

If 16 has been disabled, set up the tacking policy of 
alternating between 12 and 3, and between 12 and 11. 

If 12 has been disabled, set up the tacking policy of 
alternating between 16 and 15, and between 16 and 7. 

-Y 

CO 

#» 

-3 

If 8 has been disabled, set up the tacking policy of 
alternating between 4 and 3, and between 4 a ad 11. 

If 4 has been disabled, set up the tacking policy of 
alternating between 3 and 7, and between 8 and 15 . 

+Z 

7, 11 

If 11 has been disabled, set up the tacking policy of 
alternating between 7 and 8, and between 7 and 16 . 

If 7 has been disabled, set up tL* caching policy of 
alternating between 11 ana 12, and between 11 •iv’ 1 

-z 

3, 15 

If 15 has been disabled, set up the tacking policy of 
alternating between 3 and 4, and between 3 and 12. 

If 3 has seen disabled, set up the tacking policy of 
alternating between 15 and 8, and between 15 and 16 . 

+Z, +Y (+U) 

7, 11, 12, 16 

If either 11 or 12 has been disabled, use 7 or 16. 
If either 7 or 16 has been disabled, use 11 or 12. 

-Z, -Y (-U) 

3, «, 8, 15 

If either 8 or 15 has teen disabled, use 3 or 4. 
If either 3 or 4 has been disabled, use 8 or 15. 

+Z, -Y (+V) 

4, 7 , 8, 11 

If either 4 or 11 has been disabled, use 7 or 8. 
If either 7 or 8 has been disabled, use 4 or 11. 

-Z, +Y (-V) 

3, 12, 15, -6 

If either 15 or 16 has been disabled, use 3 or 12. 
If either 3 or 12 has been disabled, use 15 or 16. 


GTS Control Laws 

Two slov-speed actuators are used to global the 
descent engine about the Q- and R-axes. The con- 
trol nodes developed for commanding these trim 
actuators are an attitude-control mode, and an 
acceleration-nulling mode. 

The control law associated with the attitude- 
control mode has been developed to be a fun' ‘■ion 
of errors in attitude, rate, and accelerati .. 

The control-law equations are basi.iaxly a verifi- 
cation of a time-optimal solution, and are given as 


A V 

K = C.3M At L o (16) 

I 




( 18 ) 


The control output commands the sign of the 
change in angular acceleration. The sampling pe- 
riod for this mode is set at 200 milliseconds. 
Referring to Equation (16), the time-optimal law 
is modified by a 0.3 gain factor in the assumed 
control-effectiveness term K. This reduction is 
designed to avoid transient-response overshoot, 
and tc prevent large steady-state limit cycles. 
However, this gain should be kept reasonably high 
to provide good transient-response characteristics. 

Itoe GTS control law associated with the accel- 
eration-nulling mode is designed to regulate the 
offset (disturbance) acceleration from the descent 
thrust. The primary dynamical environments that 
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TABLE 9. U- AND V-AXIS JET-SELECTICU POLICIES 


Type or rotation 

Translational 
sense required 

Normal policy 

Alternate disabled-jet policy 

2- Jet, +U 

- 

5, lb 

If lb has been disabled, use 5 alone; 
if 5 has been disabled, use lb alone. 

1-Jet, +U 

+X 

ib 

If lb has been disabled, use 5. 

• 

C-*. 

n> 

rt- 

+ 

a 

-X 

5 

If 5 has been disabled, use lb. 

2- Jet, -U 

- 

6, 13 

If 13 has been disabled, use 6 alone; 
if 6 has been disabled, use 13 alone. 

1-jet, -U 

+x 

6 

If 6 has been disabled, use 13. 

--Jet, -U 

-X 

13 

If 13 has been disabled, use 6. 

2- Jet, +V 

- 

1, 10 

If 10 has been disabled, use 1 alone; 
if 1 has been disabled, use 10 alone. 

1-Jet, +V 

+x 

10 

If 10 has been disabled, use 1. 

1-Jet, +V 

-X 

i 

If 1 has been disabled, use 10. 

2-Jet, -V 


2, 9 

If 9 has been disabled, use 2 alone; 
if 2 has been disabled, use 9 alone. 

1-Jet, -V 

♦X 

2 

If 2 has been disabled, use 9> 

1-Jet, -V 

-X 

9 

If 1 las been disabled, use 2. 


TABLE 10. X-AT:J JET SELECTION POLICY 


Type of translation 

Normal policy 

Alternate disabled-jet policy 

b-jet, +X 

2, 6, 10, lb 

If either 2 or 10 has been disabled, use 6 or lb. 
If either 6 or lb has been disabled, use 2 or 10. 

2-jet, +X (fuel system A) 

2, 10 

If either 2 or 10 has been disabled, use 6 or lb. 

2- Jet, +X (fuel system B) 

6, lb 

If either 6 or lb has been disabled, use 2 or 10. 

b-Jet, -X 

1, 5, 9, 13 

If either 5 or 13 has been disabled, use 1 or 9. 
If either 1 or 9 has been disabled, use 5 or 13. 

2-Jet, -X (fuel system A) 

5,13 

If either 5 or 13 has been disabled, use 1 or 9. 

2-Jet, -X (fuel system B) 

msmm 

If either 1 or 9 has been disabled, use 5 or 13* 


cause offset acceleration include shifting center- 
of-mass properties, OPS actuator compliance, a>:d 
DPS engine-ablation effects. This control law is 
structured in the fora of a trim-gimbal drive-time 
equation, and is given as 


T <= O.b 



(19) 


The principal sampling period associated with the 
accelera- ion-nulling law is 2 seconds. However, 
under certain conditions, this acceleration-nulling 
law is used as part of the basic RCS control-lav 
timing structure . The interaction and timing logic 
between hi* RCS anJ GTS control laws are presented 
in the f lowing section. 


PCS/GTS Interface 

During DPS-povered flight, the GTS is generally 
adequate to provide satisfactory control in the Q/R 
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axes when the maneuver requirements are slowly vary- 
ing. It is believed that the GTS should provide 
complete control (rather than regulation of the off- 
set acceleration) whenever possible, to limit Jet 
firings and to minimize RCS propellant usage. Dur- 
ing design cf the DAP, a time-shared control logic 
was developed in which the use of RCS and GTS con- 
trols are interfaced to minimize mutual interaction. 

The RCS/GTS interface has been designed sc that 
the RCS phase-plane state is examined for a logical 
decision (and the RCS control law applied) at least 
every 200 milliseconds. The timeline operation is 
as follows. 


t + 100 msec. 


t + 200 msec. 


t ♦ 300 msec. 


RCS Test for 

control (l) Attitude- 
law control law 

(2) Acceleration- 
nulling law 

(3) RCS control 
law 


PCS Test for 

control (l) Altitude- 
law control law 

(2) Acceleration- 
nulling law 

(3) PCS control 
law 


The test logic associated with use of the 
attitude-control law every 200 milliseconds is that 
the trim-gimbal drive times (ir. the Q- and R-axes) 
must be less than 2 seconds [Equation (19)], and 
that all U and V RCS Jets must be off. 

The requirements associated with the use of the 
acceleration-nulling law are that the attitude- 
control law must have been used on the previous 
pass, and that the test logic for present use of 
attitude-control law must have failed. 

Therefore, in the RCS/GTS timing loop, the 
acceleration -nulling law is used only as a trans- 
action between the attitude-control law and the RCS 
control law. 

In addition to the RCS/GTS timing loop, another 
routine executes a test for the GTS acceleration- 
nulling law every 2 seconds. The nulling law is 
applied if, end only if, the trim gimbau is not 


under GTS attitude ccntrol (at least or.e of the two 
test conditions is not satisfied). This "captive" 
logic is designed to prevent a sustained thrust off- 
set when the RCS control lavs are commanding Jet 
firings to counteract the disturbance acceleration. 


HISTORY OF DESIGN DEVELOPMENT 


The history of DAP development will be discussed 
by presenting base line designs for the design- 
formulation phase (September 196U to December 1966 ) 
and for the SUNBURST flight-program phase (Decem- 
ber 1966 to August I 96 T). Where applicable, compar- 
isons will be made to the SUNDANCE base line design 
previously discussed. The significant problems en- 
countered will also be discussed. 

Apollo 5, the first (unmanned) LM mission, was 
launched intc earth orbit January 22, 1968 , and 
used the SUNBURST flight program. Following this 
mission, a decision was made to simplify the DAP 
logic, and a significant redesign of the control 
system was begun, resulting in the SUNDANCE digital 
program. This design version was flight tested on 
the first manned D-' mission (Apollo 9), launched 
March 3, 1969. Subsequent lunar-landing missions 
will be flown using a slightly modified SUNDANCE 
flight program. 


Preliminary Design Development 

Many modifications in design philosophy and in 
control-system implementation occurred during the 
preliminary design phase of DAP development. Ex- 
cellent insight into the various control-system 
problems encountered is provided by reference U. 

To establish background for a discussion of design 
problems, a base line block diagram using assumed 
conditions was formulated "igure 16). The major 
desigu areas to be discusse include RCS control- 
law formulation, estimation oncepts, RCS/GTS 
control-mode interaction logic, and RCS switching 
logic. 


A 


(Powered 



Fig. 16. Preliminary design control system. 
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Three types of estimation programs were devel- 
oped (an integrated design concept had not estab- 
lished at that time.) For coasting flight, a 
simple rate estimator was established; for powered 
ascent, a combined rate and acceleration estimator 
was designed; and for powered descent, a Kalman 
filter was developed for the GTS control-law func- 
tion, and a rate estimator for the RCS control-law 
function. 

Two control modes were provided for the powered- 
descent operation. The primary mode controls the 
Q- and R-axes with the GTS, and the P-axis with the 
RCS. The secondary control mode uses the RCS to 
control all rotational axes. The primary and sec- 
ondary control modes were designed to be exclusive 
as shown by the interface logic (Figure 17). 

When any primary-logic condition is exceeded, con- 
trol is switched to the secondary mode, and an 
open-loop GTS drive is performed, using data based 
upon the drive time derived from Equation (19). A 
Kalman filter estimate of offset acceleration A 

os 

is required, and is calculated in the primary mode 
in which undetected RCS Jet failures are not a de- 
sign factor. During the nominal secondary -mode 
operation, the RCS Jets are commanded off every 
10 seconds, and a Kalman filter estimate of the 
current offset acceleration is obtainel. After 
this sequence, the RCS control is reinstated, ac- 
companied by a new trim-gimbal open-loop drive. 

The logic conditions necessary to effect transfer 
from the secondary to the primary control are also 
presented in Figure 17. It should be noted that 
all conditions must be satisfied to return from 
secondary to primary control. The problems associ- 
ated with this logic-design concept will be dis- 
cussed in a following section. 



Fig. 17. Interface logic of the RCS/GTS. 


A significant design decision required in the 
initial developmental period was associated with the 
philosophy of RCS control law. The two fundamental 
concepts considered were a predictive control law 
based upon a two-point -boundary-value approach in 
the error phase plane, and a logic-determination 
technique requiring only present- and past-state 
information to calculate modulated Jet commands. 

When the two concepts were being considered, the 
logic-modulation technique had the advantage of con- 
siderable design experience because of analog 
control-system development. Hence, the basic deci- 
sion was whether to establish the control-law design 
by digitizing a known analog-autopilot concept, or 
by developing a predictive control law solely based 
upon digital principles. 

The logic-determination techniques available in- 
cluded pulse-frequency modulation, pulse-width mod- 
ulation, pulse-ratio modulation (PRM) delta 
modulation, and integral pulse-frequency modulation. 


The development of two proposed designs that use PRM 
techniques is discussed in references 5 and 6. The 
input to the modulator is typically obtained from 
attituie-error and rate information, &3 shown in 
.Figure 18. 



Fig. 18. Generation of control-error signal. 


The various trade-off factors between the digi- 
tal PRM and the predictive control law are worthy 
of discussion. For nominal conditions, the pre- 
dictive control law generally more efficient in 

RCS propellent usage, (an I penalty occurs for 

=>P 

pulses shorter than 80 milliseconds), and usually 
commands a smaller number of Jet firings. The 
principal disadvantages of the predictive approach 
include the sensitivity to plant uncertainties, 
such as inertia, thrust, and undetected Jet fail- 
ures, and the storage requirement for a large com- 
puter memory (parameter tracking, prediction logic, 
and recursive-filter techniques). 

The most significant advantage of the digital 
PRM approach is that all logic is based upon 
present- and past-state information. Thus, for 
large off-nominal conditions, this approach has 
distinct advantages over the predictive design. 

The disadvantages include the sensitivity to noise 
because of low-value threshold logic, and the 
large steady-state attitude offsets for sustained 
disturbance-torque conditions. The digital PRM 
system cited in reference 5 estimated a sampling- 
rate requirement of 30 to 40 samples per second. 

A modification to this PRM concept, in which both 
on-time and off -time were calculated and the sam- 
pling requirement was reduced to 10 samples per 
second, is discussed in reference 6. A general 
trade-off exists in the area of sampling, because 
a good predictive system will generally require 
lower sampling rates than a comparative logic- 
determination system. However, off-ncsninal 
environmental conditions (and basic plant 
uncertainties) tend to increase the sampling-rate 
requirements of a predictive system. Thus, an 
estimate of expected plant uncertainties and envi- 
ronmental conditions is important in establishing 
sampling-requirement trade-offs between predictive 
and logic-determination control laws. After 
extended consideration, the decision was made to 
develop a predictive control law for the DAP 
design. 

The initial concept of the phase-plane switch- 
ing logic is discussed in reference 7. This 
design concept includes a combination of parabolic 
and linear curves to represent the switching and 
targeting lines. The phase-plane logic, assuming 
a positive disturbance torque, is presented in 
Figure 19. The value of the intercept constant B 
is dependent upon the deadband. Jet-control accel- 
eration, and offset-disturbance acceleration. The 
basic purpose of establishing switching-line equa- 
tions that vary with disturbance acceleration is 
to lower the average steady-state attitude error. 
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Fig. 19. Preliminary-design phase-plane logic. 


Most of the significant problems associated 
with the preliminary design were identified as a 
result of extensive simulation testing. The prob- 
lem of estimating rate and acceleration when unde- 
tected Jet failures existed proved to be especially 
difficult. Consideration was give to the use of 
multiple Kalman filters to estimate (from space- 
craft dynamics) which of the 16 Jets had failed, 
and to adjust the control functions accordingly. 

A second approach (subsequently implemented) was 
using the Kalman filter equations only when the 
GTS control law was operative or when the RCS Jets 
were inhibited. However, disabling control during 
powered flight for the time needed to obtain good 
Kalman filter estimation was considered unaccept- 
able and the technique was then discarded. 

A second problem was that minimum-impulse opera- 
tion was not achieved using the initial design. 
Design-verification studies indicated that this 
problem was caused by rate-estimation inaccuracies 
and quantization effects. Four phase-plane logic 
modifications were considered: establishing a 

zone 3 concept (Figure 13), discounting the com- 
puted TJET time when in zone 2, setting the 
derived rate (under certain conditions) equal to a 
relatively large magnitude with the sign changed 
from the value used previously, and establishing the 
value FLAT as a function of inertia. The first 
modification was implemented in the preliminary 
design. 

Significant design problems were identified with 
respect to Kalman filter performance. In simulation 
testing, this estimator was shown to be sensitive to 
slosh disturbances and large initial conditions. 
Furthermore, during the DPS start transient, the 
filter performance exhibited poor convergence be- 
cause of engine compliance, propellant-fuel shift, 
and initial engine-mi strim conditions. The manner 
in which the Kalman filter estimate of acceleration 
was initialized was also of concern. The GTS open- 
loop drive jchnique influences how the initial 
acceleration estimate should be set for the next 
pass . The filter-extrapolation equations were also 
modified during the preliminary design phase. 
Originally, the equations did not use information 
on the assumed GTS control effectiveness. The 
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addition of the U^. term [Equation ( 10 ) ] substan- 
tially improved the performance of the Kalman filter. 

Another preliminary design problem concerned the 
vehicle performance during the DPS start transient. 
The convergence characteristics between the primary 
and secondary control modes were demonstrated to be 
marginal. The interaction of the GTS and RCS con- 
trol modes under off-nominal conditions was of con- 
cern at that time, and proved to be a major 
motivation in the subsequent decision to redesign 
the control system. 

The final problem concerned rate-overshoot per- 
formance during coasting, maneuvers. The command- 
maneuver logic did not explicitly account for the 
finite time required to accelerate or decelerate to 
the desired maneuver raoe, and additional Jet 
firings resulted. To solve this problem, lag 
angles were provided to prevent overshoot when 
initiating or terminating an automatic maneuver. 

To conclude this section on preliminary design, 
a few general remarks cn the control-system per- 
formance under off-nominal conditions are worthy of 
mention. Performance-verification studies indi- 
cated that the control system was insensitive to 
noise and small disturbance-torque conditions, but 
sensitive to inertia variations and thrust degrada- 
tions (including undetected Jet failures). 


SUNBURST Design Development 


The base line design developed for the initial 
flight program (l) and design problems that 
occurred in that time period are presented in this 
section. The flight-test results of the SUNBURST 
DAP, flown on the Apollo 5 nission, will be pre- 
sented in a later section. This description of the 
SUNBURST design emphasizes the modifications and 
additions to the preliminary base line design. 

The state-est ima tor equations are structured in 
a manner similar to that outlined in the descrip- 
tion of preliminary design. The rate equation for 
coasting flight is given by 



The rate-estimation equation for powered flight is 
identical to Equation (20) except that the term 

7 A * 

(l - — TA is added to the right-hand side. A 
2 os 0 08 

is defined as the estimated disturbance accelera- 
tion caused by a main-engine thrust. During 

descent, A Qg is determined every control period 

(T * 0.1 second) by 
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For powered ascent, the A og estimate is evalu- 
ated r »ry 2 seconds by 
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( 22 ) 


It is interesting to note that the rate- and 
acceleration-estimate equations are coupled for 
ascent. The filter gains, K and C, were estab- 
lished through detailed simulation testing. The 
nominal value of K for coast and descent is 0 . 5 . 
The gains values for ascent are time variant to 
accommodate a nominal offset-acceleration profile 
and are given as 


K • °- uu + (23) 

C = 0.25 + (2U) 


Kalman filter equations are used during the 
primary (GTS) mode and are updated every 50 milli- 
seconds. These equations are programed in gimbal- 
angle coordinates and are given as 


equations. Most of the. design description has 
emphasized the single-plane aspects of the control- 
system development. A design area unique to the 
IH-thruster geometry (RCS Jets U5 degrees from the 
body axes) was the logic of establishing the 
desired axes of rotation when simultaneous errors 
in pitch and roll occur. For the SUNBURST design, 
the Q/R axes were chosen for the control laws , and 
the concepts of urgency functions and urgency plane 
were established. Urgency functions in both the Q- 
and R-axes were developed to measure the state 
location from the coast region, as well as to meas- 
ure the RCS propellent penalty if the decision to 
apply torque be deferred. These functions are 
approximately equivalent t.n the torquing time 
needed to reach the boundary of the coast region. 
The logic flow associated with the urgency-function 
concept is presented in Figure 20. 



CDU 


CDu' + W Q 


CDU - CDu' 


( 25 ) Fig. §0. Urgency- function logic flow. 


CDU = CDU 


W x (CDU - CDU ) 


The urgency plane used to select the desired 
( 26) axis of rotation is illustrated ift Figure 21. 
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(27) 


The assumed extrapolated state equations are 
expressed by 
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where the assumed GTS control-effectiveness term is 
transformed to gimbal-angle coordinates. 

A description of the RCS control laws associated 
with the SUNBURST design is necessary to the dis- 
cussion of development . The basic structure of the 
switching lines was modified from the structure 
shown in Figure 19 to a format using only parabolic 
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The two urgency functions U^ and U R , define a 

position in the urgency plane and thus establish 
the desired axis of rotation from the eight rota- 
tion sets available (±R, +Q, tU, :V). Additional 
logic is applied to determine the number of Jets to 
be used in the chosen axis. 

Two alternate approaches will give some insight 
into tne design trade-offs. To illustrate the 
techniques , one must assume that the urgency func- 
tions in U D and U are initially established as 

shown in Figure 22a. The SUNBURST design logic 
will command a U rotation, then an R rotation, then 
a U rotation — until the urgency-function errors 
are nulled. An alternate design approach would be 
to null all U errors first, and then command the 
remaining R errors, as shown in Figure 22b. 



an independently stabilized TPS control. The GTS 
acceleration-nulling law is used as part of the 
transfer logic from the primary mode to the second- 
ary mode. The open-loop drive-time equation is 
given by 


T = 


** 77- L6 


(31) 


where a is the Kalman filter estimate of offset 
acceleration. A major difference between the SUN- 
BURST design and the preliminary design was elimi- 
nation of the technique of disabling RCf Jets 
during powered flight to obtain Kalman filter esti- 
mation during the secondary control mode. This 
elimination restricted the GTS acceleration-nulling 
law function to an open- loop drive as part of the 
RCS/GTS transfer logic. The resultant performance 
problems associated with this interface will be 
discussed later. 

The final SUNBURST design description to be pre- 
sented are the Q- and R-axis Jet-selection poli- 
cies. The Q- and R-axis rotational policies for 
both normal and disabled-jet conditions, with al- 
ternate policies listed in order of preference, are 
presented in Table 11. 


Fig. 22a. SUNBURST urgen- 
cy concept. 


Fig. 22b. Alternate SUN- 
BURST urgency concept. 


TABLE 11. Q- AND R-AXIS JET-SELECTION POLICIES 
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The alternate approach is attractive in that ad- 
vantage may be taken of the diagonal-jet moment 
arm; but, during certain disturbance-torque condi- 
tions , the delaying of the R correction could give 
undesirable performance. A second alternate ap- 
proach (implemented in the subsequent redesign) 
would be to transform the original errors into the 
U- and V-axes , and to command U and V as shown in 
Figure 22c. Because the control-axis torques in 
U and V are decoupled, these corrections can be 
applied simultaneously. The logic simplifications 
that result from this design approach are signifi- 
cant; however, inefficiencies do occur for a de- 
tected Jet failure, as discussed in reference 8. 



Fig. 22c. Another alternate 
SUNBURST urgency concept. 


A brief description of the GTS control laws 
associated with the SUNBURST design is needed. The 
time-optimal attitude-control law provided by equa- 
tions (l6), (17), and (18) was developed for the 
primary control mode in which the attitude-state 
errors are obtained from the Kalman filter equa- 
tions. This design satisfies the requirement for 


Type of rotation 

Normal 

policy 

Alternate disabled- 
jet policy 

+Q 

2, 5, 9, 1U 

2, 5; 9, 14; 2, l4; 
5, 9 

-Q 

1, 6, 10, 13 

1, 6; 10, 13; 1, 13; 
6, 10 

+R 

1, 5, 10, U* 

1, 14; 5, 10; 1, 5; 
10, 14 

-R 

2, 6, 9, 13 

6, 9; 2, 13; 2, 6; 
9, 13 

+U 

5, 14 

14; 5 

-U 

6, 13 

6; 13 

+v 

1, 10 

10, 1 

-V 

2, 9 

2; 9 

+Q (+X sense a ) 

2, 5, 9, 14 

S, 14; 2, 5; 9, 14; 
5, 9 

-Q (+X sense) 

1, 6, 10, 13 

6, 10; 1, 6; 10, 13; 
1. 13 

+R (+X sense) 

1, 5, 10, 14 

10, 14; 1, 14; 5, 10; 
1, 5 

-F. (+X sense) 

2, 6, 9, 13 

2, 6; 6, 9; 2, 13; 
9, 13 


a The -X sense policies are only slight modifica- 
tions of the +X sence policies listed. 

Several problems occurred during the SUNBURST 
design phase. The general area associated with 
the descent primary/secondary mode interface was 
tested under extreme conditions, with particular 


IS 




/ 


emphasis upon the DPS start-transient performance. 
The nominal start-transient thrust profile for DPS 
powered- flight firings is presented in Figure 23. 

A ' mass lockout" problem can occur for certain off- 
nominal conditions, when the thrust is operating 
at a maximum value of 10,500 pounds. One of the 
logic conditions needed for mandatory secondary 
control mode operation is that a change in throttle 
setting has occurred. This logic is applied when a 
change in thrust command T^ is sufficiently large to 

satisfy the ine lality. 


T^ - M — >525 pounds 


When T„ is operating at a maximum value of 

10,500 pounds, a mess error of 5 percent or more 
will cause the primary control mode to be locked 
out. The intent of this logic was to inhibit 
Kalman filter estimates of offset acceleration 
when actuator-compliance effects were introduced 
by changing throttling conditions. This potential 
problem with the interface logic was corrected in 
the SUNDANCE redesign. 



Initial condition upon entering 
RCS control law 


tf//A Reqion for transfer 
from RCS to GTS 


Fig. 2h. Example of RCS /GTS convergence. 


Simulation testing indicated +hat these factors 
could seriously degrade the performance of the 
control system during the DPS start-transient 
period. Design modifications were made to improve 
the RCS/GTS logic interface and the quality of the 
Kalman estimate of offset acceleration. The mod- 
ified interface logic is given in Figure 25. 



Time# sec. 


Fig. 23. Throttle profile. 


The performance of the primary/secondary modes 
during the DPS start-transient period was of suffi- 
cient concern to require design modifications before 
the mission. The major problem was caused by errors 
introduced in the open-loop drive-time equation and 
by the subsequent poor convergence characteristics 
of the primary/secondary control modes. The effect 
of a drive-time error is to maintain a residual off- 
set disturbance torque ’ ile the system is in the 
secondary mode. If th. J offset be iar 6 “, the RCS 
Jets converge the attitude and rate errors very 
slowly to the region in which return to the GTS con- 
trol is made. During this period, the Jets must 
fire to combat the sustained offset disturbance. An 
example of this type trajectory behavior is shown in 
Figure 2U. 

Factors that significantly contribute to the 
error in open-loop drive time are 

1. Propellant- fuel shift during ullage and the 
low throttling-time period 

2. Actuator mount compliance 

3. Uncertainties in the assumed values of H, 

L, I, and <5 

U. Kalman estimate of offset acceleration 

a. Insufficient measurements 

b. Propellant-slosh dynamics 

c. Attitude-rate initial conditions 

d. Measurement noise 



Fig. 25. Interface logic of RCS/GTS. 


The interface logic shoim provides significantly 
improved convergence characteristics at the 
expense of permitting large attitude errors during 
the transfer of control modes, ftie additional 
logic of insuring a minimum number of measurements 
for the Kalman filter was inserted because of the 
transient characteristic of the estimator. An 
actual acceleration-estimate response (9) is 
shown in Figure 26. For the simulation response 
shown, the acceleration estimate contained an 
error in sign for the first few measurements. 

Four additional design modifications were made 
to improve the DPS start-transient performance: 
modifying the Kalman filter weighting values, limit- 
ing the maximum open-loop drive time to 15 seconds , 
‘forcing the primary control (and Kalman filter esti- 
mates) at specific times when operating in the 
low-throttle region, and modifying the GTS attitude- 
control law during the 26-secoud start-transient 
period. 
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The modified GTS attitude-control law (for the 
start-transient period) is given by 

u = -sgn(a) (32) 


The modified design was considered acceptable for 
the first unmanned flight, although the inherent 
properties of the open-loop gimbal drive was of 
concern. 

In August 1967, a uecision was made to redesign 
the DAP; the SUNDANCE design, previously described, 
was the result of this itdesign effort. The 
objectives of the redesign were to reduce me.-ory- 
storage requirements, improve off-nominal perform- 
ance, and reduce computer-execution time. The 
•five major change . that resulted included elimi- 
nation of thp urgency- function concept, simplifi- 
cation of the jet-selection logic, simplification 
of the RCS control-law logic, improvement in the 
uTS/KCS interface design, and development of an 
integrated state-estimator design. 


TESTING AND VERIFICATION 


The mission-verification and design testing con- 
ducted on the SUNDANCE DAP is discussed next. The 
primary objectives of preflight testing were to 
validate the control-system performance during 
nominal conditions, off- nominal conditions, and 
mission-related :onditions. The types of simula- 
tion facilities ised included engineering digital 
simulators, interpretive computer simulators (ICS), 
and hybrid simulators. 

Engineering simulators were used during initial 
development (or modification) phases to provide 
dynamic validation and performance evaluation of 
the functional dosign under a broad spectrum of 
mission conditiois. The ICS bit-by-bit simulator 
modeled the detailed computer characteristics, and 
was used to \ eriiy the software-programing design. 
Parameter-type studies associated with off-nominal 
performance are generally inefficient to run on 
the ICS. However, nominal -performance verifica- 
tion is conducted on a mission-by-mission basis 
The hybrid simulators were used to verify hardware/ 
software interfreis, and to provide overall system- 
performance validation. With respect to the DAP, 
both design- validation and mission-verification 


testing programs were conducted on hybrid sirula- 
tors. 

The formal testing conducted on the SUNDANCE 
DAP design is reported references 8, 10, and 11. 
Reference 10 is an excellent test-results document. 
All control modes < flight were tested during 
nominal-performance conditions, RCS Jet-failure 
conditions, and incorrect-mass-property conditio. 3. 
Powered-flight testing included re >very from 
large rate and attitude errors, DPS/APS start- 
transient performance, and performance with large 
offset accelerations. A general summary of the 
test results follows. 

1. Nominal performance was satisfactory (all 
modes). 

2. Minimum- impulse limit cy-.ies were achieved 
(coasting modes). 

3. Efficient, automatic attitude maneuvers were 
achieved. 

k. Translation-acceleration capability de- 
graded by Jet failures. 

5. Powered flight modes were restively insen- 
sitive to inertia mismatch (errors o. ±25 percent 
were tolerable). 

Several tests results from reference 10 are 
presented to indicate performance trends. 

The RCS propellant consumed during a 2-degree- 
per-second maneuver is shown in figure 27 as a 
function of mass nisr-etch. The theoretical fuel 



Fig. 27. RCS fuel for 2 deg. /sec. maneuver. 


(1.21 pounces) is substantially below the minimum 
fuel usage (1.55 pounds), because the theoretical 
model does uot account for J it-plume- impingement 
forces. A summary of descent-configuration 
maneuver performance for various Jet-failed condi- 
tions is presented in Table 12. 

For the third condition listed, the fuel con- 
sumed was less than nominal. The reason for this 
paradox ir that the Jet 10 impingement force is 
larger thra the impingement forces associated with 
t»e other Jets, so that overall rvstem efficiency 
is higher if Jet 10 control be deleted. 

The final performance curve shown is presented 
in Figure ?8, in which the RCS propellant- versus- 
mar.euver rate is presented for a IA1 descent config- 
uration. The relative maneuver efficiency of the 
DAP design is difficult to assess because the theo- 
retical fuel consumption used as a standard does 
not include the effects of Jet plume impingement or 
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TABLE 12. DESCEKT-COltF IGURATI OH MANEUVER TEST SUMMARf 


Jets 

Failed 

Maneuver -ate, 
deg. /sec. 

Maneuver 

Fuel 

consumed 

during 

maneuver 

lb. 

■ — - — -» 

Theoretical ] 
fuel needed | 

Desire 

Greatest 

obtained 

Desired 

gimbal 

angles 

G label 
angles at 
end of run 

to perform 
maneuver , 
lb. 




20 

19.01 



ltcne 

2 

2.0U 

80 

91.09 

1.55 

1.21 




Ho 

39.25 



Jets 10 and 11 



20 

20.03 



failed off 

2 

2.0T 

80 

80.3C 

1.67 

1.21 

undetected 



uo 

39.86 



Jets 10 and '1 



20 

19. 8U 



failed off 

2 

2.0 £ 

80 

eo.co 

1.3U 

1.21 

detected 



UO 

39.98 



A system 



20 

19. U8 



failed Oi f 

2 

2.00 

80 

80. 

1.83 

1.21 

undetected 



UC 

39 M 



A system 



20 

20.17 



failed off 

2 

2.03 

80 

80. CO 

1.55 

1.21 

detected 



UO 

U0.U8 





the effects of crossproducts of Inertia. The theo- 
retical fuel consumption includes , however , the 
fuel required for acceleration and deceleration, 
the effect of crosscoupli ag torques, and the 



F: 28. Theoretical and actual IKS fuel consumption 

for Ut descent configuration. 


minimum- impulse fuel required to maintain the 
angular deadbands during the maneuver. 

A brief si— my of the hyb rid- simulation test 
results reported in reference 8 will ce given. The 
control system was subjected to e realistic flight 
environment including the effects of RCS thruster 
impingement, propellant slosh, and actuator com- 
pliance. Off-nominal spacecraft environments in- 
cluded inertia, thrust, and center-of-mass 
uncertainties; DPS actuator-drive uncertainty; and 
RCS Jet failures. The verification-run matrix 
associated with the hybrid testing was quite ex- 
tensive. Integrated guidance and control hardware 
and a flight attitude table were used in the test 
facilities. Twenty-seven discrepancy items re- 
ported by the testing activity required formal dis- 
position. Virtually all items requiring minor 
design modifications were incorporated into the 
lunar-landing-mission program. 

An interesting design problem occurred in the 
area of inertia cross-coupling effects. With the 
TJET calculations established in the U/V-axes 
system, an RCS torque applied around the U-axis 
produces not only an acceleration around the de- 
sired U-axis, but also, in general, a coupled ac- 
celeration about the V-axis . The same situation 
applies to an °CS torque applied around the V-axis. 
The simplified equations of motion that demonstrate 
the effect of inertia croascoupling are written as 


(33) 
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where w * angular velocity 

M^.My * applied torque 

I , I * principal moments of inertia 
yy zz r * 

This inertia crosseoupling effect between ap- 
plied J/V torques and resulting U/V angular accel- 
erations is significant only when the pitch and 
roll moments of inertia are substantially different. 
For powered-ascent operation, these inertia values 
were sufficient to cause crossccupling that resulted 
in undesired limit-cycle performance. A subsequent 
design modification was made to eliminate the in- 
ertia crosscoupling effects. A nonorthogonal set of 
control axes U'/V' was defined which has the prop- 
erty that a pure U torque produces no observable ac- 
celeration in the V* direction, and a pure V torque 
produces no observable acceleration in the U‘ 
direction. This U'/V* nonorthogonal system can be 
constructed as shown in Figure 29- 



The desired relationship between the U- and V- 
axes, and the U- and V-axes can be obtained if the 
transformation angle satisfies 


y = cos 
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(35) 


The implementation of this control law where the 
cross coupling accelerations are eliminated is de- 
scribed as follows. The vehicle state is estimated 
in the P-, Q-, R-axis system. When RCS control is 
to be applied, the Q and R components of error angle 
and rate are transformed to the U'/V* system. 

Errors about the U'-axis are controlled by firing a 
U-axis RCS torque, and errors about the V’-axis are 
controlled by firing a V-axis RCS torque. 


FLIGHT TEST RESULTS 


The flight results discussed include test data 
from the unmanned Apollo 5 mission and the manned 
Apollo 9 mission. Typical flight-data results are 
presented to indicate performance trends. The abil- 
ity to match the preflight-simulation test re- 
sults closely with the actual flight data is 
dependent upon the quality of the telemetered data 
and the knowledge of the spacecraft environment. 

In general, powered-flight maneuvers and coast ing- 
f light attitude maneuvers can be closely dupli- 
cated, but attitude-hold limit-cycle behavior is 


more difficult to match in the postflight analysis 
process. For the test data shown, a data-sampling 
frequency of one sample per second was available. 

Only the DA? coasting-flight modes were exer- 
cised on the Apollo 5 flight. Flight data for an 
automatic 5-degree-per-second attitude maneuver 
shewed close agreement with simulation data. As 
reported in reference 12, the Apollo 5 mission 
provided some unplanned limit-cycle data during 
coasting ascent because of a mass-mismatch con- 
dition. This situation arose because, although 
the spacecraft was actually in an ascent config- 
uration, the DAP computed the vehicle inertia to 
be that of the unstaged IX. As a consequence of 
the 300-percent inertia-mismatch condition, a vir- 
tually continuous-firing limit cycle resulted. The 
narrow-deadband attitude-hold logic did maintain 
the desired conditions, however. After this oper- 
ation, one PCS propellent system was allowed to 
fire to depletion, and data were taken at various 
lower thrust levels as the propellent was being 
depleted. Almost iamediately, the limit-cycle 
characteristics began to improve, and eventually 
the attitude-hold function settled into a minimum- 
impulse condition. 

Limit-cycle data were also analyzed during the 
descent-coast phase of the Apollo 5 mission (13). 
Unexplained limit-cycle trajectories in both pitch 
and roll phase planes, which were asymmetrical in 
computed error rate and symmetrical in attitude 
error, were observed. A representative trajectory 
is shown in Figure 30. During a 2-hour period, 

125 Jet firings occurred, approximately 30 of which 
nad durations of from 50 to 110 milliseconds. 



•5 -J -J -1 0 » ? J « it, 

Fig. 30. Pitch-rate error versus pitch error during 
a descent-coast phase. 


P^e flight verification testing indicated that 
l6-millisecond (minimum- impulse) firings should 
occur at the deadband extremities. An extended 
effort was made to match the flight-test data 
through simulation testing. Inertia coupling, 
aerodynamic torques, and diagonal firing logic 
were all examined, but the observed limit-cycle 
phenomenon was only partially explained. 

During another descent-coast phase, a different 
limit-cycle characteristic (Figure 31 ) was obtained. 
These trajectories contained 2C-milli second fir- 
ing times, with the limit cycle restrained to one 
side of the attitude deadband. 

Ibis trajectory condition generally occurs dur- 
ing sustained torque disturbances. Limited post- 
flight data prevented identifying the exact nature 
of this disturbance, but a combination of aero- 
dynamic torque and rate-estimation error was be- 
lieved to have been the cause. 
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Fig. 31. Pitch-rate error versus pitch error during 
another descent-coast phase. 


The Apollo 9 mission, during which the IM was 
manned for the first time, was flcvn in earth orbit. 
All powered- and coasting-flight DAP modes were 
exercised during the mission, and the control- 
system performance was generally excellent. Ho 
anomalous or 'an expected control-system conditions 
occurred. Data examined in the postflight analysis 


included peak-to-peak rates, attitude-deadband 
excursions, general limit-cycle characteristics 
(including existence of disturbance torques), ard 
trim-gimbal performance. 

Several flight-data results are given to indicate 
general performance. A 2-degree-per-second maneuver 
response for the ascent configuration is illustrated 
in Figure 32. A slight overshoot occurred in the 
Q- and R-axes, but overall rate performance was sat- 
isfactory. This overshoot; was caused by rate- 
estimator errors. 

A phase-plane plot of the limit-cycle performance 
during a powered ascent firing is presented in Fig- 
ure 33. The intent of the plot is to trace the 
shape of the limit-cycle trajectory. Because of the 
data-tampling limitations, only discrete data points 
in the phase plane are available. The plot does 
indicate on a quantitative basis that the results 
are within a range consistent with preflight simu- 
lation resuite . 

The final Apollo 9 flight-test results presented 
(Figure 3*0 is a plot of phase-plane attitude per- 
formance during a DPS insertion firing. The results 
indicate nominal attitude-hold perfcrmanc-;. 


COHCLUSIOHS 

The history of the design and devt 1 opaent of a 
first-generation digital control system has been 
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presented in this case study. Because of the de- 
sign flexibility inherent in digital systems, it is 
expected that increased emphasis will be placed upon 
digital control -system techniques. 

Hiis case study has been written to define the 
environment in which control -system designer works. 
Reviewing the design history, one gains an implicit 
perspective viewpoint of the relative importance of 
optimal control and modern control techniques. 

Some of the experience learned during develop- 
ment of the DAP may be used to avoid future design 
problems. Logical decision techniques should be 
applied with care in the design development, because < 
conditions may exist in which these techniques may 
unexpectedly lock out entire system functions. “Hie 
use of logic in avoiding degraded performance has 
to be traded off with potential unintended restric- 
tions. 

Another general ization concerns the manner in 
which requirements in the estimation function are 
established. Open-loop testing alone is not always 
adequate to assess the acceptability of the filter 
performance. Estimation requirements should re- 
flect the manner in which the output information is 
used in the control law. As an example, a control 
law that is mechanized to operate on the sign of a 
function only has different requirements from a law 
that operates on both sign and magnitude. 

Further research effort should be expended to 
develop additional analytical techniques for digital 
control-system design. Adaptive design techniques 
making use of the inherent flexibility available in 
digital systems should also be established. 


ACRONYMS 


APS ascent propulsion system 
CDU coupling data unit 

CM command module 

CSM coon and and service module 

DAP digital autopilot 

DB deadbsnd 

DPS descent propulsion system 

GTS gimbal trim system 

ICS interpretive computer simulators 

XMU inertial measurement unit 

LGC IX guidance computer 

IA lunar module 

PIPA pulsed integrating pendulous accelerometer 

PRM pulse-ratio modulation 

RCS reaction control system 

SM service module 

TJEI time(duration) of Jet firing 


K 

L 

M 


[M] 

M 

["re] 


filter weights 

L(M) distance from hinge pin cf descent 
engine bell to center of mass of IX 

estimated mass 

applied torque 

gimbal-to— pi lot increment matrix 

transformation from gimbal axes to pilot 
axes 

transformation from pilot axes to control 
axes 

noise 

integer 


n^ = masher of sample periods 

P,Q,R = pilot axes 

P,U,V = control axes 

T * control sample period 

T = thrust command 

c 

t - time 

u^,Ug a urgency functions 

u = trim gimbal drive command (+1, 0, -1) 

V * velocity 

W = Hal man filter gains 


Greek Letters 

a - angular acceleration 

6 = lag ar.» les 

Y = transformation angle between U/V and 

U'/V* axes 

ATg = steering sample period 


SYMBOLS 

A * estimated offset angular acceleration 

os 

a,b,c = mass property parameters 

B * intercept constant 

CDU » coupling data unit angle 


ATg 8 control sample period 

6 8 global drive rate of descent engine 

0.? deg. /sec. 

e 8 ppm attitude error 

e 8 gimbal angle, attitude 

(ii 8 angular velocity 


E,E 8 attitude and rate errors 

I 8 I (M ) pitch or roll moment of inertia 

I I * principle moments of inertia 
yy zz 


Subscripts 
C * cycle 

eg 8 center of mass 
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d * desired angular velocity 

e « attitude error 

G = gimbal ing 

I « inner gimbal angle 

i‘ ® index 

j = about an axis fro® the firing of a single 
Jet 

M « middle gimbal angle 

m b index 

n = index 

0 s outer gimbal angle 

Operators 
' « estimate 

• ® first time derivative 

= second time derivative 
~ = measured value 

7* = susmation 
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